The U.S. Federal Trade Commission filed a lawsuit against Kochava over alleged sale of geolocation data that can be used to track individuals to sensitive locations. The commission claims the data offers inference points on visits to reproductive health clinics, places of worship, homeless and domestic violence shelters, and addiction recovery facilities.
In this week’s global legislative roundup, India prepares a new data protection bill for public consumption ahead of Parliament’s Budget Session in January. European Data Protection Board Chair Andrea Jelinek touted the cross-border cooperation among national data protection authorities. Stakeholders outline their positions on the proposed American Data Privacy and Protection Act. And Norway’s data protection authority takes issue with the Irish Data Protection Commission’s draft decision on Meta’s EU-U.S. data transfers.
The first enforcement action under the California Consumer Privacy Act sent shockwaves through the privacy community. The $1.2 million settlement with retailer Sephora showed for the first time how the California attorney general's office will interpret CCPA provisions, particularly those around the "Do Not Sell" requirements.
Facebook agreed to settle a federal class-action lawsuit and pay damages after letting third parties access private user data, Reuters reports. The third parties included now shuttered U.K. political consultancy Cambridge Analytica.
IAPP Managing Director, Washington, D.C., Cobun Zweifel-Keegan, CIPP/US, CIPM, breaks down the latest privacy happenings in the nation’s capital, including a deeper look into the factors hampering true consensus on the proposed American Data Privacy and Protection Act. Also, notes on the U.S. Federal Trade Commission's privacy rulemaking proposal and the Federal Communications Commission's inquiry into telecommunications data handling.Full Story
The Hill reports U.S. House Committee on Homeland Security Chair Bennie Thompson, D-Miss., and Cybersecurity, Infrastructure Protection and Innovation Subcommittee Chair Yvette Clarke, D-N.Y., called on Twitter to respond to recent whistleblower claims alleging lax cybersecurity practices.
U.S. Federal Communications Commission Chairwoman Jessica Rosenworcel released public responses from top mobile carriers in response to an inquiry into their data retention and privacy practices. Rosenworcel’s request for information was issued to the top 15 U.S. mobile providers.
The proposed American Data Privacy and Protection Act and its legislative path are the closest U.S. Congress has ever been to passing comprehensive federal privacy legislation. The IAPP Resource Center has a topic page dedicated to all things ADPPA, including the latest version of the bill and various resources, analysis and original IAPP reporting related to the bill's progress. The Resource Center also carries a separate topic page for U.S.
Technology company Block is facing a class-action lawsuit for its alleged response to a data breach, IT Pro reports. Plaintiffs allege Block waited four months to notify customers of a breach to its mobile payment service Cash App application. In December, Block discovered a former employee downloaded user information and was able to access customer names, brokerage account numbers and trading activity.